$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: WRNrEZgPhs9f/npFSBjr60Ek2OQM/tLO7DEPs+vwyyE= Subject key identifier: A6:82:AF:AC:29:3D:A2:B9:63:97:63:D3:A9:53:19:71:4A:18:EA:AC Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 718BF3932C68D80D9D5DABDE7021FC6FB4E40E3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 0427 Signing time: Sat 27 Apr 2024 07:31:30 +0000 Manifest this update: Sat 27 Apr 2024 07:26:30 +0000 Manifest next update: Tue 30 Apr 2024 12:51:30 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: Ikd08spKXLEuwZYJik7vnD9BRynwS+vTT9tNyBXnCME=) 2: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: xmt+A4bLBuKOdD4dviM6s0qu1j+ylxINDSy/aubpxOM=) 3: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: l6S7ekaCFeYGjR1SnMPplYolzKgkU16zZlB4elURTUY=) 4: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: 2WLJ+rEgAPDo1hU0HNK07FK2W6QSdCym8G23LAxHFpU=) 5: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: 4/GU1Qyk0d9dbAhzkGGHUuEymrHAtO/w7LuPJlOqHa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8b:f3:93:2c:68:d8:0d:9d:5d:ab:de:70:21:fc:6f:b4:e4:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Apr 27 07:26:30 2024 GMT Not After : Apr 30 12:51:30 2024 GMT Subject: CN=A682AFAC293DA2B9639763D3A95319714A18EAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:13:e6:cc:e9:24:03:8d:e0:e9:62:b3:a9: 47:f1:8c:81:06:d6:bd:42:90:1a:ee:5e:01:25:ea: 56:c5:55:41:aa:9f:2c:e5:69:0b:86:61:2c:83:27: 94:cd:03:30:ee:71:d3:24:68:4e:b7:42:54:ec:4a: bb:d9:ad:a8:68:d7:48:21:b6:76:f7:db:bc:09:e8: 4b:5a:01:9e:21:f3:c4:e3:db:c1:d3:60:fb:2b:39: 52:3f:2d:b9:f3:04:a4:16:06:b0:8c:18:68:4d:15: bc:2a:fb:2d:5c:4f:7d:bf:a1:aa:0b:a4:74:32:13: 57:73:20:4b:26:d1:48:ea:bb:f0:cd:a1:73:2f:70: 54:52:aa:44:d5:36:ae:87:6e:8f:4b:84:04:74:75: 49:0d:53:1f:cd:28:cd:e6:16:45:84:f2:f7:c8:16: 84:4a:0f:e7:b0:69:6b:c9:95:08:c1:8e:4b:89:1b: e8:ef:07:1a:d0:d3:0a:2c:32:e6:c9:24:18:a8:86: ac:d2:70:46:a5:28:8b:1d:3d:ae:e7:c6:84:59:6d: ce:ca:53:2d:ed:dc:53:83:63:44:7c:f7:ea:76:96: ed:d3:82:74:d8:71:6e:3f:24:6f:0f:d5:8f:81:c7: 73:30:72:15:5f:c5:4b:f5:7b:3a:32:9c:a6:0a:f0: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:82:AF:AC:29:3D:A2:B9:63:97:63:D3:A9:53:19:71:4A:18:EA:AC X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b0:4d:96:38:1d:c7:f6:80:5f:c5:11:cc:26:72:d5:41:54: 8f:20:cd:9f:14:6e:bf:50:02:af:4a:c9:30:c8:d7:3f:0c:88: 9c:9d:a2:d2:fd:52:9d:ee:a6:c8:30:44:0d:38:ce:a1:7b:8c: 81:b9:89:c4:af:a7:0e:94:0b:98:23:3f:2f:b5:07:fb:94:a2: 12:68:7e:fa:fd:08:b5:55:b2:8d:f5:78:ec:39:66:e3:65:69: 62:06:d6:98:e1:ed:43:bc:b6:5d:53:cb:ee:fb:ea:d3:cb:f4: e5:95:55:6f:cc:b0:60:01:5e:bf:73:f4:d9:1b:fd:ee:c3:6c: ab:7d:02:c1:c1:67:aa:ab:76:0b:4e:50:61:92:cf:2d:fd:a3: 6f:ed:f8:cd:19:47:49:1d:41:31:53:7a:e7:c1:34:68:2c:cc: 0c:75:3b:9d:e6:c4:66:a8:59:ab:22:84:d6:5d:2b:2a:aa:ae: 55:0a:be:7d:bc:61:4f:8e:1c:80:71:85:9d:39:5a:41:71:b4: 0f:61:72:f0:c4:eb:83:cc:98:e5:1b:06:80:d8:8f:56:6a:83: 0c:61:1b:1c:41:b9:91:18:78:65:51:75:58:2d:32:48:25:47: fb:97:28:01:e9:3c:4e:84:14:b8:17:5e:1a:bd:79:8c:e7:99: c3:dc:01:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYvzkyxo2A2dXavecCH8b7TkDjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNDA0MjcwNzI2MzBaFw0yNDA0MzAxMjUxMzBaMDMxMTAvBgNV BAMTKEE2ODJBRkFDMjkzREEyQjk2Mzk3NjNEM0E5NTMxOTcxNEExOEVBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBhPmzOkkA43g6WKzqUfxjIEG 1r1CkBruXgEl6lbFVUGqnyzlaQuGYSyDJ5TNAzDucdMkaE63QlTsSrvZraho10gh tnb327wJ6EtaAZ4h88Tj28HTYPsrOVI/LbnzBKQWBrCMGGhNFbwq+y1cT32/oaoL pHQyE1dzIEsm0Ujqu/DNoXMvcFRSqkTVNq6Hbo9LhAR0dUkNUx/NKM3mFkWE8vfI FoRKD+ewaWvJlQjBjkuJG+jvBxrQ0wosMubJJBiohqzScEalKIsdPa7nxoRZbc7K Uy3t3FODY0R89+p2lu3TgnTYcW4/JG8P1Y+Bx3MwchVfxUv1ezoynKYK8Fc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpoKvrCk9orljl2PTqVMZcUoY6qwwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKewTZY4Hcf2gF/FEcwmctVBVI8gzZ8Ubr9Q Aq9KyTDI1z8MiJydotL9Up3upsgwRA04zqF7jIG5icSvpw6UC5gjPy+1B/uUohJo fvr9CLVVso31eOw5ZuNlaWIG1pjh7UO8tl1Ty+776tPL9OWVVW/MsGABXr9z9Nkb /e7DbKt9AsHBZ6qrdgtOUGGSzy39o2/t+M0ZR0kdQTFTeufBNGgszAx1O53mxGao WasihNZdKyqqrlUKvn28YU+OHIBxhZ05WkFxtA9hcvDE64PMmOUbBoDYj1Zqgwxh GxxBuZEYeGVRdVgtMkglR/uXKAHpPE6EFLgXXhq9eYznmcPcAbo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:53 2024 by rpki-client on console-ams.rpki-client.org